Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
File:                     fYtUoMG_jx-cTJVpuXXKRuuobOc.mft (raw, json)
Hash identifier:          rckOelIWvr1cNQB1SWacszCWH7IGzG0L9HChtviMgbM=
Subject key identifier:   0D:16:6E:C0:B1:33:BF:82:38:21:0B:D7:EF:22:22:59:D8:4A:27:8A
Authority key identifier: 7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7
Certificate issuer:       /CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
Certificate serial:       019CA86A03708818B5DC28D53955E1502683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
Manifest number:          CC
Signing time:             Sun 01 Mar 2026 08:00:45 +0000
Manifest this update:     Sun 01 Mar 2026 08:00:45 +0000
Manifest next update:     Mon 02 Mar 2026 08:00:45 +0000
Files and hashes:         1: AXRVN_DR5BycQVCdRUvhSmejAc8.asa (hash: W8JeQq9+EkgLaIUZ5BFcb8k9jWkbcN2YzZXMIaK67Sg=)
                          2: fYtUoMG_jx-cTJVpuXXKRuuobOc.crl (hash: iMLi6neh72rbHF6v5VFcEC5BtyvslzHc424ZmoOv16Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a8:6a:03:70:88:18:b5:dc:28:d5:39:55:e1:50:26:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d8b54a0c1bf8f1f9c4c9569b975ca46eba86ce7
        Validity
            Not Before: Mar  1 08:00:45 2026 GMT
            Not After : Mar  2 08:00:45 2026 GMT
        Subject: CN=0d166ec0b133bf8238210bd7ef222259d84a278a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:15:34:ec:aa:69:20:db:d1:94:ab:cc:6b:
                    34:10:d0:c7:a1:fe:64:b3:82:fd:1f:f4:75:53:df:
                    a0:c7:5a:e4:bc:b1:0b:91:dc:a6:88:89:82:23:e5:
                    01:0e:a0:e3:d2:0e:8c:1a:82:53:3f:43:bb:36:c7:
                    b1:cd:a0:ab:cc:25:cc:58:09:56:24:d8:84:80:8d:
                    59:67:f5:e8:86:ce:0c:d0:28:1f:40:35:94:5c:93:
                    3c:de:00:33:dc:88:cb:62:fb:45:dd:56:3c:a2:37:
                    f0:a2:82:29:91:44:a3:55:3f:6d:23:02:da:5c:d2:
                    2a:16:11:14:24:5c:35:c6:52:c6:68:dd:e5:c8:85:
                    b8:1c:4e:08:f2:6c:e0:61:60:52:ec:33:9e:a4:32:
                    51:66:1b:86:5d:bd:93:42:cb:f1:c2:ad:6a:32:1b:
                    fd:ac:fc:11:69:28:13:86:b9:e1:a1:a1:6e:fa:76:
                    08:7d:ec:37:9c:4a:41:f4:a4:70:49:56:20:5c:61:
                    97:e3:30:c9:fa:16:1f:c5:3e:a8:2b:1c:c3:e6:e3:
                    03:3b:83:dc:62:45:44:ec:70:77:bb:1e:c6:93:67:
                    3d:b7:00:0d:27:f6:d4:53:45:a3:d6:22:54:8e:ac:
                    14:5d:12:0a:8e:9c:6e:86:ee:d7:3b:e7:af:1e:c3:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:16:6E:C0:B1:33:BF:82:38:21:0B:D7:EF:22:22:59:D8:4A:27:8A
            X509v3 Authority Key Identifier:
                keyid:7D:8B:54:A0:C1:BF:8F:1F:9C:4C:95:69:B9:75:CA:46:EB:A8:6C:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fYtUoMG_jx-cTJVpuXXKRuuobOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/651fae-b20a-4a8e-9a3c-f52276be9e1e/1/fYtUoMG_jx-cTJVpuXXKRuuobOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ed:da:dc:7b:7e:b6:43:44:1e:81:36:0c:70:d5:30:c5:d2:
         e5:01:02:6a:92:b6:be:43:98:fe:70:4a:5b:4c:40:5d:7d:bc:
         63:59:b7:7c:0a:ef:53:13:e9:3f:11:59:14:49:a4:bd:f5:c4:
         01:f8:a4:22:1e:ce:48:e9:66:aa:a4:50:08:2f:2d:ed:5a:c8:
         1e:97:7e:e7:c6:9b:ae:5e:55:7d:d6:25:18:c1:e4:c1:08:86:
         14:3e:58:1f:34:b9:0d:62:76:a7:7a:9a:2b:2d:61:97:91:9c:
         3d:c2:21:b0:66:92:97:2c:f8:47:c2:dd:84:a0:dc:14:9c:cd:
         7e:8c:08:5b:82:11:ea:cb:b5:95:0e:f0:a8:b9:cc:31:60:3f:
         26:c4:56:89:10:d5:61:82:8d:c3:a5:d8:8f:42:03:68:ea:39:
         94:f4:00:32:e6:81:2a:79:10:6c:94:0d:8b:2f:5a:3f:66:e2:
         47:3d:dc:70:d7:f2:45:89:7b:74:02:ad:49:41:d3:35:03:59:
         73:27:9c:3d:aa:64:d1:a9:a1:e7:f7:3d:e9:c3:3e:d1:e3:07:
         c7:e6:92:4a:43:cb:43:51:23:2f:72:bf:fd:ac:48:ae:ba:4d:
         c8:6b:81:b4:87:b7:3d:c5:14:fa:0e:ca:c9:ee:de:49:4a:26:
         d1:45:a2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyoagNwiBi13CjVOVXhUCaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOGI1NGEwYzFiZjhmMWY5YzRjOTU2OWI5NzVjYTQ2ZWJh
ODZjZTcwHhcNMjYwMzAxMDgwMDQ1WhcNMjYwMzAyMDgwMDQ1WjAzMTEwLwYDVQQD
EygwZDE2NmVjMGIxMzNiZjgyMzgyMTBiZDdlZjIyMjI1OWQ4NGEyNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PwVNOyqaSDb0ZSrzGs0ENDHof5k
s4L9H/R1U9+gx1rkvLELkdymiImCI+UBDqDj0g6MGoJTP0O7NsexzaCrzCXMWAlW
JNiEgI1ZZ/Xohs4M0CgfQDWUXJM83gAz3IjLYvtF3VY8ojfwooIpkUSjVT9tIwLa
XNIqFhEUJFw1xlLGaN3lyIW4HE4I8mzgYWBS7DOepDJRZhuGXb2TQsvxwq1qMhv9
rPwRaSgThrnhoaFu+nYIfew3nEpB9KRwSVYgXGGX4zDJ+hYfxT6oKxzD5uMDO4Pc
YkVE7HB3ux7Gk2c9twANJ/bUU0Wj1iJUjqwUXRIKjpxuhu7XO+evHsMKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0WbsCxM7+COCEL1+8iIlnYSieKMB8GA1UdIwQY
MBaAFH2LVKDBv48fnEyVabl1ykbrqGznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2Mt
ZjUyMjc2YmU5ZTFlLzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82NTFmYWUtYjIwYS00YThlLTlhM2MtZjUyMjc2YmU5ZTFl
LzEvZll0VW9NR19qeC1jVEpWcHVYWEtSdXVvYk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO3a3Ht+
tkNEHoE2DHDVMMXS5QECapK2vkOY/nBKW0xAXX28Y1m3fArvUxPpPxFZFEmkvfXE
AfikIh7OSOlmqqRQCC8t7VrIHpd+58abrl5VfdYlGMHkwQiGFD5YHzS5DWJ2p3qa
Ky1hl5GcPcIhsGaSlyz4R8LdhKDcFJzNfowIW4IR6su1lQ7wqLnMMWA/JsRWiRDV
YYKNw6XYj0IDaOo5lPQAMuaBKnkQbJQNiy9aP2biRz3ccNfyRYl7dAKtSUHTNQNZ
cyecPapk0amh5/c96cM+0eMHx+aSSkPLQ1EjL3K//axIrrpNyGuBtIe3PcUU+g7K
ye7eSUom0UWitg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:24 2026 by rpki-client